You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2009/01/15 21:21:27 UTC

DO NOT REPLY [Bug 46541] New: Doc for LDAPTrustedClientCert doesn't match code

https://issues.apache.org/bugzilla/show_bug.cgi?id=46541

           Summary: Doc for LDAPTrustedClientCert doesn't match code
           Product: Apache httpd-2
           Version: 2.3-HEAD
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Documentation
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: trawick@apache.org


util_ldap.c has
AP_INIT_TAKE23("LDAPTrustedGlobalCert", util_ldap_set_trusted_global_cert,
                   NULL, RSRC_CONF,

RSRC_CONF means that it can't be placed inside a directory/location.

Some of the examples in mod_ldap.xml use it inside a directory/location, and
the doc also has the text "Most other toolkits require clients certificates to
be set per Directory or per Location using LDAPTrustedClientCert."


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 46541] Doc for LDAPTrustedClientCert doesn't match code

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46541

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED

--- Comment #4 from Eric Covener <co...@gmail.com> 2010-02-24 04:03:56 UTC ---
commited something similar to attached patch in r915660 after testing some
client-cert scenarios with openldap.  I don't think LDAPTrustedClientCert can
really be made usable in 2.2.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 46541] Doc for LDAPTrustedClientCert doesn't match code

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46541





--- Comment #2 from Jeff Trawick <tr...@apache.org>  2009-01-19 12:17:04 PST ---
yes I did mean to post about LDAPTrustedClientCert ;)  sorry!


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 46541] Doc for LDAPTrustedClientCert doesn't match code

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46541





--- Comment #3 from Paul J. Reder <re...@remulak.net>  2009-01-19 15:29:15 PST ---
Created an attachment (id=23141)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=23141)
Patch to fix client certs to be directory/container scoped.

Jeff, I think this fixes the scoping of the client cert directive. Let me know
if this works for you and I'll commit it.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 46541] Doc for LDAPTrustedClientCert doesn't match code

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46541


Paul J. Reder <re...@remulak.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |rederpj@remulak.net
             Status|NEW                         |ASSIGNED




--- Comment #1 from Paul J. Reder <re...@remulak.net>  2009-01-19 10:47:51 PST ---
I assume, given all the references to client cert, that you meant to post the
following clip of code:

    AP_INIT_TAKE23("LDAPTrustedClientCert", util_ldap_set_trusted_client_cert,
                   NULL, RSRC_CONF,

If that is correct, then I'll be submitting a patch shortly. If that is not
correct, then we might need further conversation to decide the path that needs
to be taken to resolve inconsistencies.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 46541] Doc for LDAPTrustedClientCert doesn't match code

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46541


Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |covener@gmail.com




-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org